Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File:                     V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier:          E92yx04EYuDDKJ1br02rwxCblIQHcu1pWcBsEwOcRBs=
Subject key identifier:   4F:65:4B:C4:22:39:26:34:FF:73:9E:7D:F7:C8:CD:BD:A0:81:DA:68
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer:       /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial:       019875625223767EA6CD553990D194925C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number:          100B
Signing time:             Mon 04 Aug 2025 14:00:34 +0000
Manifest this update:     Mon 04 Aug 2025 14:00:34 +0000
Manifest next update:     Tue 05 Aug 2025 14:00:34 +0000
Files and hashes:         1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: urWKgWKvI+34HEo/OE2bOXXJxX1QVsSYiy5D1i5b57k=)
                          2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:52:23:76:7e:a6:cd:55:39:90:d1:94:92:5c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
        Validity
            Not Before: Aug  4 14:00:34 2025 GMT
            Not After : Aug  5 14:00:34 2025 GMT
        Subject: CN=4f654bc422392634ff739e7df7c8cdbda081da68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:93:ad:98:ab:19:39:5a:ae:c9:81:aa:d7:
                    b7:08:ae:d4:9b:07:c8:b0:f7:ef:61:31:04:23:46:
                    85:8c:69:30:c5:18:2c:81:c4:90:12:94:08:26:d4:
                    8a:13:01:ed:19:54:48:02:07:a7:8a:6f:f0:47:bf:
                    b6:79:45:5e:c5:af:90:17:a2:0a:a4:25:4a:97:ad:
                    9b:c1:b5:67:f6:ce:19:ec:cd:1e:f1:60:3f:41:4c:
                    3e:3d:21:a7:8b:5e:10:65:d5:08:97:99:dc:f8:b6:
                    bc:fa:ba:a1:2c:91:f8:8f:72:2a:1f:01:f8:ae:73:
                    5b:7d:6a:fe:39:16:93:f0:80:00:1e:fb:cd:9e:ee:
                    0e:5a:d0:91:90:04:0f:f0:9a:5a:ea:2f:87:91:d0:
                    61:ad:63:bd:4f:64:ff:31:a7:6b:5d:99:6f:e7:7a:
                    cb:1a:a4:9c:43:35:74:f6:d4:46:c6:54:03:26:95:
                    2d:e9:fd:6a:eb:8d:b5:1d:52:8b:55:7d:c2:69:92:
                    fe:58:60:5c:a7:8b:5c:da:7c:cf:3f:d4:7e:0d:ce:
                    fc:1c:8d:91:1f:f1:cf:b5:8e:40:d4:13:c9:a1:12:
                    0f:f0:f9:22:73:31:ef:3c:5f:de:e7:8a:90:15:f8:
                    f5:e4:94:a6:ea:cd:bc:0c:b1:2b:a0:56:70:bc:19:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:65:4B:C4:22:39:26:34:FF:73:9E:7D:F7:C8:CD:BD:A0:81:DA:68
            X509v3 Authority Key Identifier:
                keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:f1:2f:88:63:68:3d:d7:5f:f3:48:46:36:66:3e:c8:31:
         46:7d:f8:05:93:a4:aa:16:8c:ff:7c:40:14:b7:a0:6e:3b:42:
         da:d4:dc:2d:a7:b9:0c:76:2f:96:6c:0b:fe:50:82:5d:a9:df:
         d3:f9:0c:79:11:f0:c4:5b:a0:a4:4e:c2:0f:f8:ac:27:87:de:
         f8:ea:66:5f:cd:b1:ad:82:00:ec:6f:99:8c:3e:77:9b:4b:f5:
         d5:43:0b:5d:dd:f5:70:7c:12:e8:bb:61:71:9f:b0:ab:5c:66:
         60:d8:77:62:33:4d:65:d3:03:51:18:21:29:98:57:d5:82:eb:
         1e:ea:64:ca:94:2b:58:6c:2d:de:8f:2f:a2:f7:d7:36:30:54:
         da:d5:16:21:38:61:80:d0:38:28:4c:99:40:93:29:e1:7f:0d:
         bc:06:7a:3c:b9:f0:73:fa:a0:d1:67:f1:26:b5:0e:a2:e9:01:
         bb:5c:53:a5:10:5b:41:35:be:32:30:21:33:53:da:30:c8:1a:
         6c:d1:7d:85:92:6a:07:a8:60:1a:83:11:39:ad:c7:f7:21:98:
         b9:0b:eb:a6:e2:9c:dc:f2:63:12:7e:f0:32:17:dd:ae:ad:2e:
         91:61:3c:bc:81:ab:91:07:f7:44:c7:fb:de:84:a6:89:00:14:
         a0:38:14:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YlIjdn6mzVU5kNGUklyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDk5MzMxOWRjYzkyOTc2OTQzMThiMjQ2ZWIzNmY1NWZm
MTM3MGUwHhcNMjUwODA0MTQwMDM0WhcNMjUwODA1MTQwMDM0WjAzMTEwLwYDVQQD
Eyg0ZjY1NGJjNDIyMzkyNjM0ZmY3MzllN2RmN2M4Y2RiZGEwODFkYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqguTrZirGTlarsmBqte3CK7UmwfI
sPfvYTEEI0aFjGkwxRgsgcSQEpQIJtSKEwHtGVRIAgenim/wR7+2eUVexa+QF6IK
pCVKl62bwbVn9s4Z7M0e8WA/QUw+PSGni14QZdUIl5nc+La8+rqhLJH4j3IqHwH4
rnNbfWr+ORaT8IAAHvvNnu4OWtCRkAQP8Jpa6i+HkdBhrWO9T2T/MadrXZlv53rL
GqScQzV09tRGxlQDJpUt6f1q6421HVKLVX3CaZL+WGBcp4tc2nzPP9R+Dc78HI2R
H/HPtY5A1BPJoRIP8PkiczHvPF/e54qQFfj15JSm6s28DLEroFZwvBnKFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9lS8QiOSY0/3OefffIzb2ggdpoMB8GA1UdIwQY
MBaAFFfZkzGdzJKXaUMYskbrNvVf8TcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEt
MDNhZmFjZWE3MDEwLzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEtMDNhZmFjZWE3MDEw
LzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDPxL4hj
aD3XX/NIRjZmPsgxRn34BZOkqhaM/3xAFLegbjtC2tTcLae5DHYvlmwL/lCCXanf
0/kMeRHwxFugpE7CD/isJ4fe+OpmX82xrYIA7G+ZjD53m0v11UMLXd31cHwS6Lth
cZ+wq1xmYNh3YjNNZdMDURghKZhX1YLrHupkypQrWGwt3o8vovfXNjBU2tUWIThh
gNA4KEyZQJMp4X8NvAZ6PLnwc/qg0WfxJrUOoukBu1xTpRBbQTW+MjAhM1PaMMga
bNF9hZJqB6hgGoMROa3H9yGYuQvrpuKc3PJjEn7wMhfdrq0ukWE8vIGrkQf3RMf7
3oSmiQAUoDgUYA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:39 2025 by rpki-client